CVE-2022-50091

MEDIUM EPSS 10.3%
Published Jun 18, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jun 18, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: locking/csd_lock: Change csdlock_debug from early_param to __setup The csdlock_debug kernel-boot parameter is parsed by the early_param() function csdlock_debug(). If set, csdlock_debug() invokes static_branch_enable() to enable csd_lock_wait feature, which triggers a panic on arm64 for kernels built with CONFIG_SPARSEMEM=y and CONFIG_SPARSEMEM_VMEMMAP=n. With CONFIG_SPARSEMEM_VMEMMAP=n, __nr_to_section is called in static_key_enable() and returns NULL, resulting in a NULL dereference because mem_section is initialized only later in sparse_init(). This is also a problem for powerpc because early_param() functions are invoked earlier than jump_label_init(), also resulting in static_key_enable() failures. These failures cause the warning "static key 'xxx' used before call to jump_label_init()". Thus, early_param is too early for csd_lock_wait to run static_branch_enable(), so changes it to __setup to fix these.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
10.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 3

VendorProductVersionRange
linuxlinux_kernel*≥5.13  –  <5.15.61
linuxlinux_kernel*≥5.16  –  <5.18.18
linuxlinux_kernel*≥5.19  –  <5.19.2

References 4

  • git.kernel.org https://git.kernel.org/stable/c/05de9e2e33b1625c71aee69e353fe906dd2be88a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9c9b26b0df270d4f9246e483a44686fca951a29c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b480d1e9a8c11ecc1c99dc01814b28e3103bd0a0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d2cbdbe22b5f190055d2d0ae92e7454479343a30
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/05de9e2e33b1625c71aee69e353fe906dd2be88a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9c9b26b0df270d4f9246e483a44686fca951a29c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b480d1e9a8c11ecc1c99dc01814b28e3103bd0a0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d2cbdbe22b5f190055d2d0ae92e7454479343a30
    Patch